u/Reasonable_Brick_894

I'm investigating a strange WordPress issue and would appreciate any guidance.

Environment:

• WordPress
• Elementor + Elementor Pro
• OceanWP
• Hostinger hosting

Problem: A page called "DACOR Indica" (/conteudos/) used to display a large list of posts.

Suddenly:

• The page became empty.
• Posts are still published in WordPress (200+ posts).
• The page itself still exists and is published.
• Sometimes Elementor shows the content, sometimes it disappears.
• Revisions do not restore the page correctly.

Plugin behavior:

• Xpro Elementor Addons OFF = page loads (but empty)
• Xpro Elementor Addons ON = critical error

Additional findings: I found these files in public_html:

wp-security.php wp-server.php wp-contt.php cm-prepend.php cm-serve.php agent_renew.php tester.php tester2.php .cm-cfg

These do not look like standard WordPress files.

I also received PHP errors related to Complianz GDPR mentioning database command synchronization issues.

Actions already performed:

• Restored website files from Hostinger backup
• Tested Xpro on/off
• Checked that posts still exist
• Checked Elementor revisions
• Installed Wordfence (not yet deeply analyzed)

Questions:

1. Do these files look like malware/backdoors?
2. Could malware corrupt Elementor's _elementor_data?
3. Is Xpro likely the cause or just exposing another issue?
4. What would you inspect first:
   • _elementor_data
   • error_log
   • .user.ini
   • suspicious PHP files
   • database

Any advice is appreciated.